Privacy Policy

• Account information, including your phone number, display name, password hash, language, currency, and timezone.
• Financial records you choose to enter, including amounts, transaction notes, categories, dates, and starting balance.
• WhatsApp message content and provider identifiers needed to receive commands, send replies, prevent duplicates, and retry failed delivery.
• Subscription status and payment-provider customer, subscription, and product identifiers. NotaWA does not store full payment card details.
• Technical and security data such as request metadata, rate-limit records, authentication state, and error logs.

We use information to create and secure accounts, process WhatsApp commands, maintain transaction records, calculate balances and summaries, manage subscriptions, provide support, detect abuse, and improve reliability.

When AI categorization is enabled, a short transaction note and transaction type may be sent to OpenAI to suggest one of NotaWA's predefined categories. Amounts, account passwords, and payment card data are not required for that classification.

We use service providers to operate NotaWA, including API.CO.ID for WhatsApp messaging, a payment provider for checkout and subscription billing, OpenAI for optional category classification, and hosting, database, monitoring, and infrastructure providers.

These providers process information under their own terms and privacy commitments. We share only the information reasonably needed for their role.

Depending on your location, we process information to perform our contract with you, operate and secure the service in our legitimate interests, comply with legal obligations, and act on consent where consent is required.

We retain account and transaction data while your account is active and for a reasonable period afterward when needed for recovery, security, legal compliance, dispute resolution, and financial records. Retention periods may vary by data type and applicable law.

NotaWA and its providers may process information in countries other than your own. Where required, appropriate contractual or legal safeguards are used for international transfers.

We use safeguards including password hashing, signed HTTP-only sessions, access controls, request validation, rate limiting, database constraints, and verified billing webhooks. No internet service can guarantee absolute security.

You may update account settings in the dashboard. Depending on your location, you may also request access, correction, deletion, restriction, portability, or objection relating to your personal information.

To make a privacy request, contact support@notawa.com. We may need to verify your identity before completing a request.

NotaWA is not directed to children who cannot legally consent to the processing of their personal information. If you believe a child has provided information improperly, contact us so we can investigate.

We may update this policy as NotaWA changes. The effective date above shows the latest revision, and material changes will be communicated when reasonably practical.